All Apps and Add-ons

TrackMe table does not display

GOB_Bluth
Explorer

The search job completes however the table panel never displays on the main page under 'Data Tracking' 

Any ideas where to look??

Labels (1)
Tags (1)
0 Karma

guilmxm
Influencer


Hi @GOB_Bluth 

Please apologise, I haven't noticed your question on TrackMe earlier. 

Have you made any progress? 

TrackMe is pretty straightforward, so it is unlikely that it cannot proceed to the discovery of the data sources, hosts and other types of obects being tracked.

I will think in writting a trouble shooting doc in the official documentation.

At the root of TrackMe, there are "trackers", which are scheduled reports designed to be tackling the data discovery and the maintenance of the various KVstore collections.

Focussing on data sources, you would first look at the reports named:

TrackMe - Data sources availability short term tracker

The first part of the search would allow to see easily the data being found:

| savedsearch "TrackMe - Data sources abstract root tracker"


You haven't shared much details such as screenshots, please do so or contact me on Slack if you are still blocked.

Guilhem







0 Karma
Get Updates on the Splunk Community!

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through:An introduction to the Splunk Threat ...

Splunk Life | Happy Pride Month!

Happy Pride Month, Splunk Community! 🌈 In the United States, as well as many countries around the ...

SplunkTrust | Where Are They Now - Michael Uschmann

The Background Five years ago, Splunk published several videos showcasing members of the SplunkTrust to share ...